CVE-2009-2344: The web-based management interfaces in Sourcefire Defense Center (DC) and 3D Sensor before 4.8.2 allow remo...

Security readout for executives and security teams

This is a privilege-escalation issue in legacy Sourcefire Defense Center and 3D Sensor web management interfaces before version 4.8.2. An authenticated user could gain higher privileges through user-edit functionality. The business risk is concentrated where old Sourcefire management systems still exist and are reachable by non-admin users. Exposure is likely limited to organizations still running Sourcefire DC or 3D Sensor before 4.8.2, especially where the web management interface is accessible to multiple authenticated users. Treat as a targeted legacy-asset risk. Prioritize if these systems manage security monitoring infrastructure or if management access is broad. No active exploitation is proven in the supplied sources. Mitigation focus: Identify any Sourcefire DC or 3D Sensor deployments and confirm versions.; Upgrade affected systems to 4.8.2 or later where vendor-supported.; Restrict management interface access to trusted administrative networks only..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.